copillm 0.2.5 → 0.2.6

package/dist/cli/launchAgent.js

@@ -1,10 +1,14 @@
-import { spawn } from "node:child_process";
 import { resolveAgent } from "./resolveAgent.js";
+import { spawnAgent } from "./windowsSpawn.js";
 export async function launchAgent(opts) {
     const log = opts.log ?? ((line) => process.stderr.write(`${line}\n`));
     let resolved;
     try {
-        resolved = await resolveAgent(opts.agent, { pinnedSpec: opts.pinnedSpec, log });
+        resolved = await resolveAgent(opts.agent, {
+            pinnedSpec: opts.pinnedSpec,
+            preferPath: useSystemAgentOptIn(),
+            log
+        });
     }
     catch (error) {
         const message = error instanceof Error ? error.message : String(error);
@@ -14,11 +18,9 @@ export async function launchAgent(opts) {
     }
     log(resolved.displayLine);
     const childEnv = { ...process.env, ...opts.env };
-    const useShell = process.platform === "win32" && /\.(cmd|bat)$/i.test(resolved.binPath);
-    const child = spawn(resolved.binPath, opts.args, {
+    const child = spawnAgent(resolved.binPath, opts.args, {
         stdio: "inherit",
-        env: childEnv,
-        shell: useShell
+        env: childEnv
     });
     return new Promise((resolve, reject) => {
         child.once("error", reject);
@@ -65,3 +67,17 @@ function installHint(agent) {
         "    npm i -g @anthropic-ai/claude-code"
     ].join("\n");
 }
+/**
+ * Whether the user has opted in to letting copillm fall back to a system-installed
+ * coding-agent binary on PATH. Off by default — copillm uses its own cache and
+ * downloads on demand so the executed version is deterministic.
+ *
+ * Opt in by setting `COPILLM_USE_SYSTEM_AGENT` to `1`, `true`, or `yes`
+ * (case-insensitive).
+ */
+function useSystemAgentOptIn() {
+    const raw = process.env.COPILLM_USE_SYSTEM_AGENT;
+    if (!raw)
+        return false;
+    return /^(1|true|yes)$/i.test(raw.trim());
+}

package/dist/cli/packageInfo.js

@@ -1,7 +1,7 @@
 import { createRequire } from "node:module";
 const FALLBACK_PACKAGE_INFO = {
     name: "copillm",
-    version: "0.2.5"
+    version: "0.2.6"
 };
 export function getPackageInfo() {
     const envName = cleanPackageValue(process.env.COPILLM_PACKAGE_NAME);

package/dist/cli/resolveAgent.js

@@ -39,8 +39,12 @@ export async function resolveAgent(agent, opts = {}) {
     const pkg = pin.packageName;
     const binName = AGENT_REGISTRY[agent].binName;
     const agentRoot = path.join(cacheRoot, agent);
-    // 1. PATH lookup (skipped when user pinned a specific version)
-    if (!pin.version && opts.preferPath !== false) {
+    // 1. PATH lookup (opt-in only).
+    // PATH lookup is OFF by default so the running agent version is always the one copillm
+    // manages in its cache. Users who want to fall back to a system-installed binary can opt
+    // in via the COPILLM_USE_SYSTEM_AGENT env var (wired in launchAgent.ts) or by passing
+    // `preferPath: true` directly. Pinned versions always skip this branch.
+    if (!pin.version && opts.preferPath === true) {
         const found = findOnPath(binName);
         if (found) {
             const v = probeVersion(found) ?? "unknown";

package/dist/cli/windowsSpawn.js

@@ -0,0 +1,71 @@
+import { spawn } from "node:child_process";
+const META_CHARS = /([()\][%!^"`<>&|;, *?])/g;
+function escapeArgument(arg, doubleEscapeMetaChars) {
+    let escaped = `${arg}`;
+    escaped = escaped.replace(/(?=(\\+?)?)\1"/g, '$1$1\\"');
+    escaped = escaped.replace(/(?=(\\+?)?)\1$/, "$1$1");
+    escaped = `"${escaped}"`;
+    escaped = escaped.replace(META_CHARS, "^$1");
+    if (doubleEscapeMetaChars) {
+        escaped = escaped.replace(META_CHARS, "^$1");
+    }
+    return escaped;
+}
+function escapeCommand(command) {
+    return command.replace(META_CHARS, "^$1");
+}
+/**
+ * Build the `cmd.exe /d /s /c "..."` invocation we need to run a `.cmd` /
+ * `.bat` file safely on Windows.
+ *
+ * Background: Node's `child_process.spawn` cannot directly exec a batch file
+ * (CreateProcess only understands real PE binaries), and `shell: true` is now
+ * deprecated when combined with an args array because Node performs no
+ * escaping (see Node DEP0190). The accepted alternative — long used by
+ * cross-spawn and npm's own bin shims — is to spawn `cmd.exe` ourselves,
+ * pre-quote the command line, and set `windowsVerbatimArguments: true` so
+ * Node hands the buffer to Windows untouched.
+ *
+ * The quoting follows the well-known two-layer algorithm:
+ *   1. Apply Microsoft's CommandLineToArgvW rules (backslash/quote dance) so
+ *      that the underlying program parses each argument back into the values
+ *      we passed in.
+ *   2. Escape cmd.exe metacharacters (`^ & | < > ( ) % ! ;` etc.) with `^` so
+ *      they don't get interpreted by the shell before the program sees them.
+ *
+ * `doubleEscape` is needed when the target is an npm-generated `.cmd` shim
+ * (which itself spawns a nested cmd.exe via `CALL` on older npm versions, or
+ * via subshell composition); each cmd.exe parse strips one layer of `^`, so
+ * we apply it twice to survive the round trip. We default to true for
+ * `.cmd`/`.bat` because every agent we launch is installed via npm.
+ */
+export function buildWindowsCmdInvocation(file, args, doubleEscape = true) {
+    const escapedCommand = escapeCommand(file);
+    const escapedArgs = args.map((a) => escapeArgument(a, doubleEscape));
+    const commandLine = [escapedCommand, ...escapedArgs].join(" ");
+    const comspec = process.env.ComSpec || process.env.comspec || "cmd.exe";
+    return {
+        command: comspec,
+        args: ["/d", "/s", "/c", `"${commandLine}"`]
+    };
+}
+/**
+ * Spawn a child process, transparently routing `.cmd` / `.bat` files through
+ * `cmd.exe` with safe quoting on Windows. Non-Windows platforms and real
+ * `.exe` / `.com` binaries go through a direct `spawn` with no shell flag.
+ *
+ * Mirrors the surface of `child_process.spawn(file, args, options)` but
+ * never sets `shell: true` and therefore never triggers Node's DEP0190
+ * deprecation warning.
+ */
+export function spawnAgent(file, args, options) {
+    if (process.platform !== "win32" || !/\.(cmd|bat)$/i.test(file)) {
+        return spawn(file, args, { ...options, shell: false });
+    }
+    const { command, args: cmdArgs } = buildWindowsCmdInvocation(file, args);
+    return spawn(command, cmdArgs, {
+        ...options,
+        shell: false,
+        windowsVerbatimArguments: true
+    });
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "copillm",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "description": "Local Copilot proxy CLI (OpenAI/Anthropic-compatible)",
   "license": "MIT",
   "type": "module",